Create dev mode evals override

Author: mxmeinhold

README.md

@@ -29,7 +29,9 @@ VOTE_SLACK_APP_TOKEN=
 VOTE_SLACK_BOT_TOKEN=
 ```
 
-You can also set `DEV_DISABLE_ACTIVE_FILTERS="true"` to disable the requirements that you be active
+### Dev Overrides
+`DEV_DISABLE_ACTIVE_FILTERS="true"` will disable the requirements that you be active to vote
+`DEV_FORCE_IS_EVALS="true"` will force vote to treat all users as the Evals director
 
 ## Linting
 These will be checked by CI

docker-compose.yaml

@@ -13,6 +13,7 @@ services:
       VOTE_OIDC_SECRET: "${VOTE_OIDC_SECRET}"
       VOTE_STATE: 27a28540e47ec786b7bdad03f83171b3
       DEV_DISABLE_ACTIVE_FILTERS: "${DEV_DISABLE_ACTIVE_FILTERS}"
+      DEV_FORCE_IS_EVALS: "${DEV_FORCE_IS_EVALS}"
     ports:
       - "127.0.0.1:8080:8080"
 

main.go

@@ -26,7 +26,10 @@ import (
 var VOTE_TOKEN = os.Getenv("VOTE_TOKEN")
 var CONDITIONAL_GATEKEEP_URL = os.Getenv("VOTE_CONDITIONAL_URL")
 var VOTE_HOST = os.Getenv("VOTE_HOST")
+
+// Dev mode flags
 var DEV_DISABLE_ACTIVE_FILTERS bool = os.Getenv("DEV_DISABLE_ACTIVE_FILTERS") == "true"
+var DEV_FORCE_IS_EVALS bool = os.Getenv("DEV_FORCE_IS_EVALS") == "true"
 
 func inc(x int) string {
 	return strconv.Itoa(x + 1)
@@ -123,7 +126,7 @@ func main() {
 		c.HTML(200, "create.tmpl", gin.H{
 			"Username": claims.UserInfo.Username,
 			"FullName": claims.UserInfo.FullName,
-			"IsEvals":  containsString(claims.UserInfo.Groups, "eboard-evaluations"),
+			"IsEvals":  isEvals(claims.UserInfo),
 		})
 	}))
 
@@ -184,7 +187,7 @@ func main() {
 			poll.Options = []string{"Pass", "Fail", "Abstain"}
 		}
 		if poll.Gatekeep {
-			if !slices.Contains(claims.UserInfo.Groups, "eboard-evaluations") {
+			if !isEvals(claims.UserInfo) {
 				c.HTML(403, "unauthorized.tmpl", gin.H{
 					"Username": claims.UserInfo.Username,
 					"FullName": claims.UserInfo.FullName,
@@ -503,6 +506,11 @@ func main() {
 	r.Run()
 }
 
+// isEvals determines if the current user is evals, allowing for a dev mode override
+func isEvals(user cshAuth.CSHUserInfo) bool {
+	return DEV_FORCE_IS_EVALS || containsString(user.Groups, "eboard-evaluations")
+}
+
 // canVote determines whether a user can cast a vote.
 //
 // returns an integer value: 0 is success, 1 is database error, 3 is not active, 4 is gatekept, 9 is already voted